runtime: provide passwd and group entries for sandbox identity - #40
Open
zbarsky-openai wants to merge 1 commit into
Open
zbarsky-openai wants to merge 1 commit into
zbarsky-openai wants to merge 1 commit into
Conversation
PostgreSQL initialization currently fails in an actiond sandbox with: ```text initdb: could not look up effective user ID 65534: No such file or directory pg_ctl: database system initialization failed ``` The runtime already configures `passwd: files` and `group: files`, but has no corresponding NSS databases. Generate small `/etc/passwd` and `/etc/group` pseudo-files containing the existing root and UID/GID 65534 sandbox identities. No packages are added to the runtime. A complete runtime image rebuilt successfully (891 actions). Rerunning the original PostgreSQL/pgvector integration test through the rebuilt VM resolved UID 65534 to `nobody`, created the cluster directories and configuration, and advanced to the separate missing System V shared-memory kernel capability.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
PostgreSQL initialization currently fails in an actiond sandbox with:
The runtime already configures
passwd: filesandgroup: files, but has nocorresponding NSS databases. Generate small
/etc/passwdand/etc/grouppseudo-files containing the existing root and UID/GID 65534 sandbox identities.
No packages are added to the runtime.
A complete runtime image rebuilt successfully (891 actions). Rerunning the
original PostgreSQL/pgvector integration test through the rebuilt VM resolved
UID 65534 to
nobody, created the cluster directories and configuration, andadvanced to the separate missing System V shared-memory kernel capability.